b4fb97d65f42d0dcd46adcdfdfa9f10c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4fb97d65f42d0dcd46adcdfdfa9f10c
Size

24KB
MD5

b4fb97d65f42d0dcd46adcdfdfa9f10c
SHA1

68de4d59fc135a69315cf58ada7f1c8b760b4b2c
SHA256

eb0dcdbf9a2fc36f10b249899564f562a8176db7f2fddd3f31d240ee73747f2f
SHA512

40684c38adb1d667394bf18b5a04435092491fe220802ff6ce3581a823f1ebec072463493983c1c31ea04cddf92a4871b07f862b34a4cdcfec99efd9a099198c
SSDEEP

384:VApo9ignZu4G15Zth2dEBH76aAizMnU4b0VHUDdkfp4+m1a4W0+W:V8v4Q5fcdEh7TdMnUCm5fp4lf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4fb97d65f42d0dcd46adcdfdfa9f10c

Files

b4fb97d65f42d0dcd46adcdfdfa9f10c
.exe windows:4 windows x86 arch:x86

2957bfc3b0848f2ad1cde8965bf81715

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
CloseHandle
Process32Next
Process32First
CreateToolhelp32Snapshot
WinExec
GetModuleFileNameA
SetLocalTime
GetLocalTime
WriteFile
CreateFileA
GetFileSize
ReadFile
SetFilePointer
GetModuleHandleA
GetTempFileNameA
GetTempPathA
GetPrivateProfileStringA
Sleep
LoadLibraryA
GetProcAddress
GetTickCount
CreateThread
GetFileAttributesA
lstrcmpiA
GetStartupInfoA

user32

ShowWindow
GetWindowLongA
FindWindowA
wsprintfA

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

_itoa
_strcmpi
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
free
strncpy
malloc
atoi
strrchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE